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(57) ABSTRACT 

According to the present invention, when electronic money 
is sent from a given network to another network, a money 
change apparatus performs a money change process to 
change electronic money current on the given network into 
electronic money current on another network, and therefore 
when a user of the given network uses a settling process, by 
managing this money change process, it is possible to 
manage the interchange of electronic money between each 
of the users of the given network and each of the users of 
another network without affecting the working environment 
of electronic commerce. Electronic money current on 
LAN20 is referred to as local electronic money current only 
on the network. When a terminal NLU4 connected to 
LAN20 sends money to a terminal NWU2 connected to 
WAN10, GW1 for controlling the flow of data between 
LAN20 and WANIO receives local electronic money sent 
from the terminal NLU4, changes the local electronic money 
into electronic money current on WAN10, then sends the 
electronic money to the terminal NWU2, and when a ter- 
minal NWU2 sends money to a terminal NLU4, GW1 
receives electronic money sent from the terminal NWU2, 
changes the electronic money into local electronic money 
and sends the local electronic money to the terminal NLU4. 

13 Claims, 13 Drawing Sheets 
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FIG. 3 



ELECTRONIC MONEY 
RECEIPT LOG 




1174 



ELECTRONIC MONEY 
PAYMENT LOG 





LOCAL ELECTRONIC MONEY 
GENERATION & TRANSFER LOC 



LOG 
RECORDER 



LOCAL ELECTRONIC MONEY 
COLLECTION & ERASURELOGy' 



1173 




10/03/2003, EAST Version: 1.04.0000 



U.S. Patent Nov. 26, 2002 Sheet 4 of 13 US 6,487,542 B2 









AUTHENTI- 
CATION RESUI 


Success 


Failure 


BANK NAME 


NB3a 


NB3b 


MONEY 
RECEIVED 


¥98,800 


¥103,400 


RECIPIENT 


USER NAME 
@NLU4a 


USER NAME 
@NLU4b 


■NDER 


USER NAME 
@NWU2a 


USER NAME 
@NWU2b 


co 


PROCESSING 
DATEJIME 


1997/2/14 
15:34:56 


1997/2/14 
16:43:32 


EPTANCE 


CO 


to 

CO 


8o 

<2 







REMITTANCE 
RESULT 


Success 


Success 


DNEY CHG. 
iRVER 


GW1 


GW1 


Sco 






MONEY 
RECEIVED 


¥8,800 


¥103,400 


RECIPIENT 


USER NAME 
@NLU4a 


USER NAME 
@NLU4b 


SENDER 


USER NAME 
@NWU2a 


USER NAME 
@NWU2b 


PROCESSING 
DATEJIME 


1997/2/14 
14:23:34 


1997/2/14 
15:35:29 


INDEX NO. 


r- 

00 


00 








1 

LU 


CD 
LO 
CVI 


LO 

CVi 


8o 







< 

CD 

LL 



ERASURE 
RESULT 


Success 


Success 


MONEY CHG. 
SERVER 


GW1 


GW1 


:y 

WED 


o 
o 

CO 


o 
o 
•>* 


MONE 
RECE 


co" 
co 
» 


o" 
> 


RECIPIENT 


USER NAME 
@NWU2a 


USER NAME 
@NWU2b 


SENDER 


USER NAME 
@NLU4a 


USER NAME 
@NLU4b 


PROCESSING 
DATEJIME 


1997/3/14 
10:21:32 


1997/3/14 
23:32:21 


INDEX NO. 


co 

CM 
CM 


in 

CM 


ACCEPTANCE 
NO. 


OJ 


oo 



DO 

o 

LL 



O 



REMITTANCE 
RESULT 


Success 


Failure 


BANK NAME 


NB3a 


NB3b 


MONEY 
RECEIVED 


¥907,800 


¥10,400 


RECIPIENT 


USER NAME 
@NLU4a 


USER NAME 
@NLU4b 


SENDER 


USER NAME 
@NWU2a 


USER NAME 
@NWU2b 


PROCESSING 
DATEJIME 


1997/3/14 
10:22:43 


1997/3/14 
23:33:25 


■ON 






INDEX 


o 
o> 


CO 

o> 


EPTANCE 


CM 
CO 


CO 
CO 


8o 







O 

LL 



10/03/2003, EAST Version: 1.04.0000 



U.S. Patent Nov. 26, 2002 Sheet 5 of 13 US 6,487,542 B2 
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FIG. 7 
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FIG. 8 
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FIG. 9 
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FIG. 16 
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METHOD AND APPARATUS FOR Technology, like ecash, which realizes settlement on a 

MANAGING ELECTRONIC MONEY AND network by electronic money, is generally called network 

STORAGE FOR STORING AN ELECTRONIC type electronic money. Unless otherwise denned, the net- 

MONEY MANAGEMENT PROGRAM work type electronic money is hereafter referred to simply as 

5 electronic money. 

BACKGROUND OF THE INVENTION SUMMARY OF THE INVENTION 

1. Field of the Invention As described in RELATED ART above, there are a variety 

The present invention relates to technology for managing 10 of of electronic money. It can easily be foreseen that 

electronic money that circulates on networks, such as the man Y other of electronic money will appear and 

Internet circulate intermingling on the networks in the future. At 

2. Description of Related Art P resent ' !| owever > t e \ e Z Uoaic , c ° mm « ce is impossible 
_ , /T ^^ , , T , between the users of different kinds of electronic money, a 
Electronic commerce (EC) on networks such as the Inter- ^ which fl re(Juces ^ effec|iveness o£ electro ' mc 

net is now spreading widely. Under the circumstances, is set Q emen t 

technology has been proposed for settling accounts in elec- ' 

tronic commerce on a network. This technology is called P r °S ress ° f ^tronic money. «1 mil become 

electronic settlement. Some systems and protocols proposed P° sslble for ^dividual persons to easily remit large sums of 

so far are listed in the following. mone y across boundaries of countries. Under such a 

(D First Virtual 20 station, there are possibilities for the management of 

Anelectrorncsettlementsystemproposedby First Virtual. curren fy f ™ m one oonntiy to another to get out of 

Credit card setdement is used. It is a precondition that only coni ™ l > whlch ^ny S lves rise to fiDancia ^security, such 

digital information goods transferable on a network are dealt 88 inflation or deflation on an international scale, 

with. Electronic mail is used to give and accept orders, but As described above, electronic money is characterized by 

facsimile is used to transmit card numbers for security 25 its strong protection of anonymity of the user. However, in 

reasons. the cas e of the conventional ecash described above, wheo 

(2) CyberCash members of organizations, such as business firms, use elec- 
An electronic settlement system proposed by CyberCash. tronic money, owing to its characteristic, it is anticipated that 

Credit card settlement is used. In addition to giving and problems will arise which would not be so troublesome 

accepting orders, networks such as the Internet are used to 30 when individual persons use electronic money. To cite some 

transmit information about card numbers or the like, which examples, 

need to be safeguarded. Therefore, a powerful encryption (1) When a member of an organization settles an account 

process is performed on those items of information before with a user outside the organization by using electronic 

transmission to ensure security. money, the administrative department (e.g., the account- 

(3) SET (Secure Electronic Transaction) 35 ing or materials department) of the organization is unable 
This is an electronic settlement protocol, proposed by to manage the settlement of the account. 

Visa International, Master Card International, etc. Credit (2) Since it becomes possible to send remittance outside the 

card settlement is used. As in CyberCash, a strong encryp- organization easily by the use of electronic money, the 

tion process is conducted on information about giving and amount of damage may run up to an alarming sum in the 

accepting orders and card numbers or the like before trans- 40 case of a remittance error, embezzlement or fraud, 

mission. With the conventional form of ecash, if a payment is made 

Furthermore, SET provides means for authenticating by electronic money on hand, a sum of payment is collected 

credit card users and means for authenticating member as a combination of different nominal values of electronic 

stores where the credit cards can be used. money and the money is sent. For this reason, the user must 

(4) Ecash 45 always be cognizant of the numbers of different pieces of 
Ecash is an electronic setdement system proposed by electronic money of different nominal values that he pos- 

DigiCash and uses the electronic money digital cash system. sesses. 

More specifically, cash settlement is made by electronic The present invention has been made with the above 

money having a value equal to an actual paper currency. The problems taken into consideration, and has its object to 

user draws electronic money conesponding to the sum of 50 enable management of the transfer of electronic money 

payment from the storage medium, and sends the money to without affecting the working environment of electronic 

the recipient. commerce when settlement systems for different kinds of 

The above examples (1) to (3) are applications of settle- electronic money are used, 

ment by credit card to settlement in electronic commerce. To solve the above problems, the present invention pro- 

Therefore, credit cards are required to settle accounts. Infer- 55 vides a method of managing electronic money in a network 

mation about a card number or the like, which needs to be apparatus installed between a first network and a second 

protected, must be sent in one form or another. Moreover, network, wherein electronic money circulating only within 

the flow of money (who spent how much, and where) is the first network is designated as electronic money current 

known to a third party, in other words, it shows low on the first network (This electronic money is hereafter 

anonymity. 60 referred to as electronic money A), the method comprising 

In contrast to these, ecash in (4) applies cash settlement by the steps of: 

bills and coins for settlement in electronic commerce. when a first terminal connected to the first network sends 

Unlike (1) to (3) above, credit cards are not required. Like money to a second terminal connected to the second 

in cash settlement by bills or coins, it is difficult for a third network, receiving electronic money A sent from the 

party to detect the flow of money (strong anonymity). 65 first terminal, changing the electronic money A into 

As has been described, ecash is highly convenient electronic money current on the second network (The 

because it does not use credit cards as a means of setdement. latter electronic money is hereafter referred to as elec- 
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tronic money B), and sending electronic money B to FIG. 2 is a schematic block diagram showing the function 
said second terminal; and realized by a CPU executing an electronic money manage- 
when the second terminal sends money to the first ment program in an information processing apparatus hav- 
terminal, receiving electronic money B sent from the ing a communication function using a network; 

^roS 5 ™- ^ « diagram showing log files generated by a log 

the first terminal. recorder 117 > 

In the above case, the network apparatus is a gateway or FIG. 4 is a diagram showing an example of the content of 

a router, for example. each log file in FIG. 3; FIG. 4A shows an example of an 

In the present invention, electronic money that can be electronic money receipt log 1171; FIG. 4B shows an 

handled by the first terminal connected to a certain network 10 example of a local electronic money generation/sending log 

is assumed to be electronic money A current in that network, u 7 2 ; FIG. 4C shows an example of a local electronic money 

in other words, electronic money A is assumed to be a collection/deletion log 1173; and FIG. 4D shows an example 

different kind of electronic money from electronic money B of m electron i c money payment log 1174; 

current on another network. According to the present ,™ . . A , _ 

invention, a network apparatus connected both to one net- is . ™ , 5 is an example of a format of electronic money 

work and another network is charged with performing a issued by terminal NB3; 

money change function between electronic money A and FIG. 6 is an example of a format of electronic money a 

electronic money B. By this arrangement, the money change generated by a local electronic money generator 113 in FIG. 

process is always performed by the network apparatus 2; 

during the settlement process when electronic commerce is 20 FIG. 7 is a flowchart for explaining the operation of 

performed between the first and the second terminals. remittance from terminal NWU2 to terminal NLU4; 

Therefore, according to the present invention, when a user tt . , . . 

of the first terminal connected to a certain network conducts FlG - 8 » a flowchart for explaining the ^ operation of 

electronic commerce with a user of the second terminal remittance from terminal NLU4 to terminal NWU2; 

connected to the other network, the network apparatus FIG. 9 is a diagram showing an example of local elec- 

invariably performs the money change process between 25 tronic money in FIG. 6 added with a user's digital signature; 

electronic money A and electronic money B to settle p[G. 10 is a flowchart for explaining the operation f 

accounts. Accordingly, the organization (the administrative remittance from terminal NLU4a to terminal NWU4fc; 

department namely, the accounting or materials RG u ^ ft flowchart for lamin the tion f 

department) that manages the users .connected to .^certain remiUance from terminal ^jj^ terminal N £ U4 j> in . 

network can manage the settlement or accounts between the 30 - ^ ^ r , ,. 

user at the first terminal connected to the certain network and first modification of the embodiment; 

the user at the second terminal connected to the other FIG - 12 is a diagram showing an example of a message 

network by, for example, recording a history of the money sent from terminal NLU4 on the sender side to terminal 

change process at the network apparatus and monitoring the GW1 in the first modification of the embodiment of the 

records. As a result, it is possible to minimize trouble in 35 present invention; 

electronic commerce, such as errors in remittance or FIG. 13 is a diagram showing local electronic money paid 

embezzlement. into a moneybox 1151 of the remittance destination as 

Local electronic money can be transferred directly directed by the message shown in FIG. 12; 

between the users of the terminals connected to a certain RG u [& a ^ showi an k of ^ COfltent 

network without intervention of the network apparatus, so ^ A . fiU 110 

that anonymity as the advantage in payment by electronic 40 stored m ^ p^ission file 1152 

money can be maintained. FIG - 15 K a flowchart for explaining the operation for the 

In the present invention, when the first terminal sends user at the terminal NLU4a to obtain authority from the user 

money to the second terminal, if the nominal value of at the terminal NLU46 in a second modification of the 

electronic money A sent from the first terminal is larger than embodiment of the present invention; 

the amount of money previously allotted to the user at the 45 FIG. 16 is a diagram showing an example of local 

first terminal, the money change process may be designed electronic money accompanied by a message asking for 

such that electronic money A is sent back to the first terminal authority to remit in the second modification of the embodi- 

without being converted into electronic money B. ment 0 f me present invention; and 

By this arrangement in electronic commerce between the mQ 1? ^ a ^ showin m e le q£ ^ 

user at the first terminal connected to the certain network and so , , • j u *u ■* * t 

, , j > * . - , electronic money accompanied by an authority transler 

the user at the second terminal connected to the other . iL J , ' r , ' . . 

! . . t • , . . . „ •„ message in the second modification 01 the embodiment ot 

network, trouble in electronic commerce, such as an error in & . 

remittance or embezzlement, can be further minimized efii- the P resent invention. 

cie J? dy ; . , ^ , ^ DETAILED DESCRIPTION OF THE 

Further, in the present invention, the network apparatus 55 PREFERRED EMBODIMENTS 
may be so arranged as to change electronic money A sent 

from the first terminal into a desired combination of different A preferred embodiment of the present invention will be 

nominal values of electronic money A in response to a described in the following. 

command from the first terminal. pro, 1 i s a schematic configuration diagram of the net- 
In this case, the user at the first terminal can get a desired fiQ work apparatus to which a preferred embodiment of the 
amount of electronic money A generated even if he is not nt invention is applicd . 

tronic mot' aSK^oS^ ^ ^ WAN1 ° denotes a Wide Area Network, 1AN20 denotes a 

ronic money a e possesses. Local Area Network, and GW1 denotes a gateway located 

BRIEF DESCRIPTION OF THE DRAWINGS between WAN10 and LAN20. NB's 3a, 36 are terminals of 

FIG. 1 is a schematic configuration diagram of a network 65 a bank issuing electronic money, and are connected to 

apparatus to which an embodiment of the present invention WAN10 (hereafter NB's 3a, 3b are referred to merely as 

is applied; NB3). NMU's 2a, 2b and NLU's 4a, 4b are terminals of the 
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users of an accounts settling system by electronic money. draws cash from the account of the user at the terminal 

NWU's 2a, 2b (hereafter referred to also as NWU2) are NWU2, changes cash into electronic money, and sends 

connected to WANIO, while NLU's 4a, 4b (hereafter electronic money through WANIO to the terminal NWU2. 

referred to also as NLU4) are connected to LAN20. In this Also, the terminal NB3 changes electronic money sent 

embodiment, terminals NLU4 connected to LAN20 are 5 through WANIO from the terminal NWU2 into cash, and 

assumed to be terminals used by users of an organization (a deposits cash into the account of the user at the terminal 

business firm, for example), and terminals NWU2 connected NWU2 

to WANIO are assumed to be terminals used by users outside A , AAt « 

the organization. In other words, LAN20 is formed within an ^ SSf^ to * mB T? A WANIO 

organization from "Wl, withdraws cash from the account of the 

In this embodiment, electronic money that can be handled 10 ^anization in which LAN20 is set up changes cash into 

by the terminals NLU4 connected to LAN20 is limited to electronic money and sends it through WANIO to GW1 

electronic money that is current only within LAN20, Furthermore, NB3 changes electronic money remitted 

namely, a kind of electronic money that is different from through WANIO from GW1 into cash, and deposits it into 

electronic money issued by the terminal NB3 (hereafter the account of the organization having LAN20 formed 

electronic money current only within LAN20 is referred to 15 therein. 

as local electronic money, while electronic money issued by In addition, the terminal NB3 performs a certification 
the terminal NB3 is referred to simply as electronic money.) process for electronic money sent and an authentication 
In this embodiment, GW1 is charged with performing a process on electronic money received, 
money change function between electronic money and local ^ ^ ^ fe basicaUy ^ same ^ & teminal of 
electronic money. a ban k usec j f or me electronic money digital cash system 
Under this arrangement, in an electronic transaction con- including ecash that has been described in the RELATED 
ducted between the terminals NLU4a and NLU46 connected j^j above ^ tennis nb3 can be realized by a CPU 
to LAN20, payment is made directly by local electronic executing a program loaded in memory from a recording 
money. Furthermore, in an electronic transaction between a medium, such as a magnetic disk in an information process- 
terminal NLU4 connected to LAN20 and a terminal NWU2 25 mg apparatus including a function of transferring electronic 
connected to WANIO, a money change process is invariably money on a network. 

carried out at GW1. Description will next be given of the terminal NWU2 

More specifically, when money is remitted from a termi- ted b user not belonging to the organization includ- 

nal NLU4 to a terminal NWU2, GW1 intercepts local £ LAN20. 

electronic money sent from the terminal NLU4, changes the 30 m ^ m „ T „ . , . Jf , 

local electronic money into the corresponding amount of p ™* l™™ 2 ca » s 0Q a te nninal NB3 to withdraw cash 

electronicmoney,andsendsittotheterminalNWU2.0nthe ^am a designated account and change it into ekctronic 

other hand, when a terminal NWU2 remits money to a mon 7> "f"^ elec * omc mone y * f™* 1 

terminal NLU4,GW1 intercepts electronic money sent from Jcects it to change to cash and deposit the cash into a 

the terminal NWU2 and changes the electronic money into 35 desi g nate d account. 

the corresponding amount of local electronic money. GW1 The terminal NWU2 is basically the same as a user's 

then sends the local electronic money to the terminal NLU4. terminal which is used for utilizing the electronic money 

Therefore, in this embodiment, when a member of an di S ital cash s y stem » such as ecasn described in the 

organization conducts electronic commerce with a user n RELATED ART above. The terminal NWU2 can be realized 

outside the organization, a money change process is always 40 b V a CPU executing a predetermined program loaded in 

performed at GW1 between electronic money and local memory from a recording medium, such as a magnetic disk, 

electronic money. For this reason, the administrative depart- m ™ ^formation processing apparatus including a function 

mcnt (accounting or materials) of the organization can of transferring electronic money on a network, 

manage the settling process between a member of the Description will next be given of the terminal NLU4 used 

organization and a user outside the organization by moni- by a member of an organization incorporating LAN20. 

toring the money change process at GW1. Because of this, The NLU4 is basically the same as the terminal NWU2. 

it is possible to minimize damage caused by remittance It should be noted that electronic money that can be handled 

errors, embezzlement, or the like. by the terminal NWU2 is electronic money issued by the 

Local electronic money can be transferred directly 5Q terminal NB3, while electronic money that can be handled 

between the members of the organization without interven- by the NWU2 is local electronic money current only within 

tion by GW1, so that anonymity as the advantage in settling LAN20. 

accounts by electronic money can be maintained. As mentioned earlier, GW1 performs a money change 

A detailed description will now be given of the compo- process between local electronic money and electronic 

nents of the network apparatus to which this preferred ss money, for which reason the terminal NLU4 can execute 

embodiment is applied. settlement processes with the other parties to electronic 

The terminals NB3 of the bank that issues electronic commerce without worrying about whether the other party is 

money will first be discussed. It is assumed that a user at a at a terminal of LAN20 or WANIO. 

terminal NWU2 has had an account opened and an organi- Description will now be given of GW1 which performs 

zation in which LAN20 has been established has had its 60 the money change process between local electronic money 

account opened at this bank. and electronic money. 

Each of the terminals NB3 withdraws cash from the GW1 has a function of controlling data transmitted 

customer's account and changes cash into electronic money, between WANIO and LAN20. This function is realized by a 

or changes electronic money into cash and deposits cash in transport programs TP12a and Mb loaded into memory by 

the customer's account. 65 CPU from a recording medium, such as a magnetic disk, in 

More specifically, in response to a command sent from the an information processing apparatus incorporating a func- 

terminal NWU2 through WANIO, the terminal NB3 with- tion of communication on a network as shown in FIG. 1. The 
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TP12a relays data and messages exchanged with the termi- 
nals of WAN10 to a specified program (EMMP11, for 
example, which will be described later). On the other hand, 
TP12B relays data and messages exchanged with the termi- 
nals of LAN20 to a specified program (EMMPH, described 5 
later). These functions are the same as those in an ordinary 
gateway. 

In addition to these functions, GW1 in this embodiment 
further includes a function of controlling electronic money 
held by the organization using LAN20 (including the money 1Q 
change process between local electronic money and elec- 
tronic money). This function is realized by a CPU executing 
an electronic money management program EMMP11 loaded 
into memory from a recording medium, such as a magnetic 
disk, in an information processing apparatus having a func- 
tion of communication on a network as illustrated in FIG. 1. 15 

FIG. 2 is a schematic block diagram showing the func- 
tions realized by a CPU executing the electronic money 
management program EMMP11 in an information process- 
ing apparatus having a function of communication on a 
network. 20 

An electronic money content analyzer 112 analyzes elec- 
tronic money received from a terminal NWU2, and sends the 
money to a terminal NB3. The content analyzer 112 requests 
the terminal NB3 to change the electronic money into cash 
and deposit the cash in the account. The content analyzer 112 25 
passes information obtained by analysis of the electronic 
money from the terminal NWU2 to a local electronic money 
generator 113. According to information from a local elec- 
tronic money eraser 114, the content analyzer 112 requests 
the terminal NB3 to withdraw an amount of cash specified 30 
by the information from the account and change it into 
electronic money. The content analyzer 112 receives elec- 
tronic money from the terminal NB3, and sends it to the 
terminal NWU2. 

On the basis of information from the electronic money 
content analyzer 112, the local electronic money generator 
113 generates an amount of local electronic money corre- 
sponding to electronic money received from the terminal 
NWU2. 

40 

A local electronic money content analyzer 115 contains a 
moneybox 1151 for accommodating local electronic money 
held by a member of the organization having LAN20, and a 
permission file 1152 including information, such as the 
amount of local electronic money that the member can 4$ 
handle. 

The local electronic money content analyzer 115 stores 
local electronic money generated by the local electronic 
money generator 113 in a moneybox 1151 corresponding to 
the user of a terminal NLU4 being a receiver (a member of 50 
the organization having LAN20), and also sends a notifica- 
tion of this to the terminal of the receiver. Furthermore, the 
local electronic money content analyzer 115 analyzes local 
electronic money received from the terminal NLU4 by 
referring to the permission file 1152 and log recorder 117, S5 
and sends analysis information to a local electronic money 
eraser 114. 

The local electronic money eraser 114, on the basis of 
information from the local electronic money content ana- 
lyzer 115, erases local electronic money corresponding to an gQ 
amount, specified by the information, from the moneybox 
1151 specified by the information, and sends a notification 
of this to the electronic money content analyzer 112. 

The log recorder 117 records the processes of the com- 
ponents shown in FIG. 2. 65 

FIG. 3 is a diagram showing log files generated by the log 
recorder 117. 
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In FIG. 3, an electronic money receipt log 1171 contains 
records on the process of remittance of electronic money 
from a terminal NWU2 connected to WAN10 to a terminal 
OT3 and the process of money conversion to cash. A local 
electronic money generation and transfer log 1172 contains 
records on the generation and transfer processes of local 
electronic money. A local electronic money collection and 
erase log 1173 holds records on the collection and erasure 
processes of local electronic money. An electronic money 
payment log 1174 stores records on the remittance process 
of electronic money. 

Those log files are described in the following. 

FIG. 4A shows an example in the electronic money 
receipt log 1171. 

In FIG. 4A, in the acceptance number field, the accep- 
tance number of electronic money received at the electronic 
money content analyzer 112 is written in the order of 
acceptance. The processing date and time field indicates the 
date and time of acceptance of electronic money at the 
electronic money content analyzer 112. The sender field 
indicates data including the address of the user at the 
terminal (NWU2a or 26) which remitted electronic money. 
The receiver field shows data including the address of the 
user at the terminal (NLU4a or 46) as the destination of 
electronic money. The money-received field indicates the 
nominal value of electronic money. The bank name field 
indicates data such as the address of the bank office (NB3a 
or 36) where electronic money was cashed. The authentica- 
tion result field shows information about whether or not 
electronic money was successfully cashed. 

FIG. 4B shows an example in the local electronic money 
generation and transfer log 1172. 

In FIG. 4B, the acceptance number field indicates the 
acceptance number of local electronic money generated by 
the local electronic money generator 113 and the receipt of 
local electronic money is written in the order of generation. 
The index number field shows the acceptance number at the 
electronic money receipt log 1171 of electronic money, 
which was converted into local electronic money. The 
processing date and time field indicates the dates and times 
of generation of local electronic money. The sender field 
indicates the address of the user at the terminal (NWU2a or 
2b) that remitted the electronic money converted to local 
electronic money. The money receiver field shows data 
including the address of the user at the receiving terminal 
(NLU4a or 4b) of local electronic money. The money- 
received field indicates the nominal value of local electronic 
money. The server name field indicates the name of the 
gateway (GW1 in this embodiment) which generated local 
electronic money. The remittance result fields indicate infor- 
mation about whether local electronic money was remitted 
to the receiver successfully or not. 

FIG. 4C shows an example in the local electronic money 
collection and erase log 1173. 

In FIG. 4C, in the acceptance number field, the acceptance 
number of local electronic money erased by the local 
electronic money eraser 114 is written in the order of 
erasure. The index field indicates the acceptance number at 
the local electronic money generation and transfer log 1172, 
of erased local electronic money. The processing date and 
time field indicates the date and time of erasure of local 
electronic money. The sender field indicates data including 
the address of the user at the terminal (NLU4a or 4b) that 
remitted local electronic money. The receiver field indicates 
data such as the address of the user at the terminal (NWU2a 
or 26) as the destination of electronic money converted from 



10/03/2003, EAST Version: 1.04.0000 



US 6,487,542 B2 

9 10 

local electronic money. The money-received field indicates above-mentioned content of the fields with a secret key 

the nominal value of the erased local electronic money. In possessed by the bank. 

the server name field, the name of the gateway (GW1 in this Description will next be given of the operation of the 

embodiment) which erased local electronic money is writ- network apparatus to which this embodiment is applied, 

ten. In the erasure result field, information about whether or 5 In this embodiment, to avoid wiretapping on the network, I 

not the local electronic money was erased successfully is all data or messages, including electronic money, are subject / 

written. to encryption processing using the public-key encryption I— 

FIG. 4D shows an example in the electronic money system before they are transmitted on the network. A digital / 

payment log 1174. signature obtained by encrypting the data or message with \ 

In FIG. 4D, in the acceptance number field, the accep- 10 toe secret key of the user at the sending terminal is added to \ 

tance number of electronic money sent by the electronic eaca data or message. ,/ 

money content analyzer 112 is written in the order of Description will now continue with the operation of 

remittance. The index number field indicates the acceptance making remittance from a terminal NWU2 connected to 

number, at the local electronic money collection and erasure WAN10 to a terminal NLU4 connected LAN20. 

log 1173, of local electronic money converted to electronic 15 FIG. 7 is a flowchart for explaining the operation of 

money. Ihe processing date and time field shows the date making remittance from a terminal NWU2 to a terminal 

and time of remittance of electronic money. The sender field NLU4. 

indicates information including the address of the user of the A user at a terminal NWU2 sends a connection request 

terminal (NLU4a or 4b) as the source of remittance of local message to a terminal NB3 of the bank where his own 

electronic money converted to electronic money is written, 20 account has been opened. On receiving the connection 

The receiver field indicates information such as an address request message, the terminal NB3 sends a connection- 

of the user of the terminal (NWU2a or 2b) being the acknowledging message to the terminal NWU2. Thus, a 

remittance destination of the local electronic money con- connection is established between the terminal NWU2 and 

verted into electronic money. The money received field the terminal NB3. 

shows the nominal value of local electronic money con- 25 Subsequently, the terminal NWU2 performs a process by 

verted into electronic money. The bank name field indicates a specific function using the amount of money to remit to a 

information including the address of the bank office (NB3a terminal NLU4 and a random number it generates as argu- 

or 3fc) that issued the electronic money. The remittance ments to thereby generate a string of digits. A message 

result field indicates information about whether the elec- requesting the issuance of electronic money has a generated 

tronic money was remitted successfully or not. 30 digit string (blind signature) appended and is sent to the 

Description will now move on to electronic money issued terminal NB3 (Step 2001). 

by the terminal NB3. This electronic money is basically the When receiving this message, the terminal NB3 with- 

same as that used in the electronic money digital cash draws the amount requested from the account of the user at 

system, such as ecash described in the RELATED ART ^ the terminal NWU2, changes the money into electronic 

above. money as shown in FIG. 5, and after encryption, sends an 

FIG. 5 shows an example of the format of electronic encrypted electronic money to the terminal NWU2 (Step 

money issued at the terminal NB3. 1001). Then, NWU2 releases the connection with the ter- 

In the Value field, the value of electronic money is written. minal NB3. 

In the Serial field, the serial number by which the bank 4Q The terminal NWU2, when receiving electronic money 

manages the issuance of electronic money is written. In the from the terminal NB3, sends a connection request message 

Generator field, the address of the bank office that generated to the terminal NLU4 as the receiver of remittance (Step 

electronic money is written. The Signature field indicates a 2002). This connection request message is received by GW1 

digital signature which was obtained by encrypting the before reaching the terminal NLU4. In response to the 

contents of the above-mentioned fields using a secret key 45 message, the GW1 performs a money receiving procedure 

that the bank possesses. This digital signature certifies that on behalf of the terminal NLU4. 

the bank shown in the Generator field generated electronic GW1 passes the connection request message through 

money. TP12a to the electronic money content analyzer 112 of 

Description will now proceed to local electronic money EMMP11. Accordingly, the electronic money content ana- 
current only in LAN20. 50 lyzer 112 sends a connection-acknowledging message 

FIG. 6 shows an example of the format of local electronic accompanied by a public key of GW1 to TP12a. TP12a 

money generated by the local electronic money generator sends this message received from the content analyzer 112 

113 shown in FIG. 2. to the terminal NWU2 that sent the connection request (Step 

The Value field indicates the value of electronic money 3001). Thus, a connection is established between GW1 and 

converted to local electronic money. In the Serial field, the 55 tne terminal NWU2. 

serial number of this local electronic money is written. This The terminal NWU2, when receiving the connection- 
serial number indicates the number in the order of genera- acknowledging message, encrypts electronic money, which 
tion at GW1 and the same number is not used again. Written is to be remitted, using a public key attached to the 
in the From field is data including the address of the user at connection-acknowledging message, and sends encrypted 
the terminal (NWU2a or 2b) as the source of remittance of 60 electronic money to the terminal NLU4 as the destination of 
electronic money converted into the local electronic money. remittance (Step 2003). The encrypted electronic money is 
In the To field, data including the address of the user at the received by GW1 before reaching the terminal NLU4, and 
receiving terminal (NLU4a or 4b) of local electronic money changed by GW1 to local electronic money. Local electronic 
is written. The Generator field indicates data including the money is transmitted to the terminal NLU4 as the destina- 
address of the gateway (GW1 in this embodiment) that 65 tion of remittance. 

issues local electronic money. The Signature field indicates GW1 passes encrypted electronic money through TP12a 

a digital signature which was obtained by encrypting the to the electronic money content analyzer 112 of EMMP11. 
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The electronic money content analyzer 112 decrypts The terminal NWU2 terminates the process after receiv- 

encrypted electronic money using its own secret key, and ing the transaction success message (Step 2005). 

checks the name of the bank that issued the electronic money After the process at Step 3005 is closed, the electronic 

from decrypted electronic money. Then, the electronic money content analyzer 112 of GW1 notifies the acceptance 

money content analyzer 112 sends a connection request 5 number, recorded by the log recorder 117 in the electronic 

message to TP12a. TP12a sends the message received from money receipt log 1171, to the local electronic money 

the electronic money content analyzer 112 to the terminal generator 113. In response to this, the local electronic money 

NB3 of the bank revealed at the electronic money content generator 113, searches the electronic money receipt log 

analyzer 112 (Step 3002). nn h y min & me acceptance number received from the 

TT7L ■ . *u . .u m electronic money content analyzer 112, and reads received 

When receiving the connection request message, the io Monnat / on rorreS p 0 nding to the acceptance number, 

terminal NB3 sends a connecUon-acknowledge message Tfae / Qcal electronic money enerator U 3 generates an 

along with its own public key to GW1 that sent the con- amomU of local electronic money corresponding to the 

nection request message(Step 1002). Consequently, a con- amount of money received. The log recorder 117 writes 

nection is established between the terminal NB3 and GW1. information about generation and transfer of local electronic 

GW1 sends the connection-acknowledge message from 15 money in the local electronic money generation and transfer 

the terminal NB3 through lP12a to the electronic money log 1172 (Step 3006). As shown in FIG. 4B, in the field of 

content analyzer 112 of EMMP11. The electronic money acceptance number, the number in the order of processing is 

content analyzer 112 encrypts electronic money received written. In the field of processing date and time, the date and 

from the terminal NWU2 using a public key attached to the time when the information is written is indicated. In the 

connection -acknowledging message, and sends the 20 fields of sender, receiver and money received, information in 

encrypted electronic money to TP12a. TP12a sends the electronic money receipt log 1171 is copied. In the field 

encrypted electronic money received from the electronic of money change server, the name of GW1 is written. At this 

money content analyzer 112 to the terminal NB3 (Step point in time, no information is written in the field of 

3003). remittance result 

When receiving the encrypted electronic money, the ter- 25 Hie local electronic money generator 113 of GW1 sends 

minal NB3 decrypts the electronic money using its own generated local electronic money along with information 

secret key, and makes a judgment whether or not to approve written in the local electronic money generation and transfer 

the receipt of the electronic money by checking the serial log 1172 to the local electronic money content analyzer 115. 

number and the digital signature of decrypted electronic In response to this, the local electronic money content 

money (Step 1003). When receipt is rejected as a result of 30 analyzer 115 stores local electronic money in a moneybox 

judgement, NB3 sends a rejection message to GW1. After 1151 of the receiver determined by the supplied information, 

this, NB3 releases the connection with GW1. Then, a message indicating the arrival of local electronic 

GW1 sends a receipt rejection message, which has come money is sent through TP126 to the terminal NLU4 of the 
from NB3, through TP12a to the electronic money content 35 receiver (Step 3007). Subsequently, GW1 releases the con- 
analyzer 112 of EMMPU. In response, the electronic money nection with the terminal NLU4. 

content analyzer 112 sends a transaction failure message to Next, the log recorder 117 writes a remittance result in the 
TP12a. TP12a sends the transaction failure message trans- field of remittance result in the local electronic money 
mitted from the electronic money content analyzer 112 to the generation and transfer log 1171. GW1 terminates the pro- 
terminal NWU2 that sent the electronic money (Step 3004), ^ cess (Step 3008). 

Subsequently, GW1 releases the connection with the termi- The user (a member of the organization) at the terminal 

nal NWU2. NLU4 that received the message, if he wants to use local 

The terminal NWU2 terminates the process after receiv- electronic money, establishes a connection with GW1, and 

ing a transaction failure message (Step 2004). sends his own public key to GW1 (Step 4001). GW1 passes 

On the other hand, when it approves the receipt of 45 the pubUc key through TP12b to the local electronic money 

remittance as a result of judgement, the terminal NB3 content analyzer 115. The local electronic money content 

changes electronic money, received from GW1, to cash and analyzer 115 withdraws local electronic money from the 

deposits the cash into the account of the organization to moneybox 1151 of the user at the terminal NLU4 who sent 

which the user at the terminal NLU4 belongs. Then, NB3 lhe P ublic ke y, and encrypts local electronic money with the 

sends a receipt success message to GW1 (Step 1004). After 50 P ubUc kev > and sends the mone y to me terminal NLU4 (Step 

this, the terminal NB3 terminates the process by releasing 3009). 

the connection with GW1 (Step 1005). The terminal NLU4 receives the encrypted local elec- 
When receiving the receipt success message from the tronic money (Step 4002), and stores it in a suitable record- 
terminal NB3, GW1 sends this message through TP12a to m device. The user can use the encrypted local electronic 
the electronic money content analyzer 112 of EMMPll. In ss mone y b y decrypting it with his own secret key. 
response to this, the electronic money content analyzer 112 Description will be given of the operation of making 
sends a transaction success message to TP12a. TP12a sends remittance from a terminal NLU4 connected to LAN20 to a 
the transaction success message, received from the elec- terminal NWU2 connected to WAN10. 
ironic money content analyzer 112, to the terminal NWU2 FIG. 8 is a flowchart for explaining the operation of 
that sent the electronic money. The connection established eo sending money from a terminal NLU4 to a terminal NWU2. 
between the terminal NWU2 and GW1 is then released. In a terminal NLU4, after encrypted local electronic 
The log recorder 117 writes electronic money receipt money stored in the recording device is decrypted using the 
information in the electronic money receipt log 1171 (Step user's own secret key, the local electronic money has a 
3005). As shown in FIG. 4A, the acceptance number, digital signature appended using this secret key (Step 4101). 
processing date and time, sender, receiver, money received, 65 Incidentally, an example of local electronic money shown in 
bank name, and receipt success/failure message are written FIG. 6 having a user's digital signature attached is shown in 
in the related fields. FIG. 9. 
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The terminal NLU4 sends a connection request message 
to a terminal NWU2 as the destination of remittance (Step 
4102). This connection request message is received by GW1 
before reaching the terminal NWU2. In response to the 
connection request message, GW1 performs a remittance 5 
procedure on behalf of the terminal NLU4. 

GW1 passes the connection request message through 
TP126 to the local electronic money content analyzer 115 of 
EMMP11. In response to this, the local electronic money 
content analyzer 115 sends a connection-acknowledge mes- io 
sage accompanied by GWl's public key to TPUb. TP126 
sends the message conveyed by the local electronic money 
content analyzer 115 to the terminal NLU4 that sent the 
connection request message (Step 3101). Consequently, a 
connection is established between GW1 and the terminal 15 
NLU4. 

When receiving the connection-acknowledge message, 
the terminal NLU4 encrypts local electronic money, which 
is to be remitted, with a public key attached to the 
connection-acknowledge message, and sends the encrypted 20 
local electronic money to the terminal NWU2 as the desti- 
nation of remittance (Step 4103). The encrypted local elec- 
tronic money is received by GW1 before reaching the 
terminal NWU2, and is converted into electronic money 

This electronic money is sent to the terminal NWU2 as the 25 
destination. 

GW1 sends encrypted local electronic money through 
TPMb to the electronic money content analyzer 115 of 
EMMP11. In response thereto, the local electronic money 3Q 
content analyzer 115 decrypts the encrypted local electronic 
money using its own secret key. GW1 checks the digital 
signature attached to decrypted local electronic money 
against a previously registered public key of a user (a user 
using a digital signature) at the- terminal NLU4 (Step 3102). ^ 

If the public key which is required for checking a digital 
signature has not been registered, GW1 gets the public key 
transmitted by sending a message requesting the transmis- 
sion of the public key to the terminal NLU4 of the user who 
added the digital signature. ^ 

As a result of the check, if abnormality is discovered in 
the digital signature (Step 3103), the local electronic money 
content analyzer 115 stores the local electronic money in a 
moneybox exclusively for abnormal local electronic money, 
installed inside the moneybox 1151. After this, GW1 sends 45 
a transaction termination message to TP12b. TP12i> passes 
the received transaction termination message to the terminal 
NLU4 that transmitted the local electronic money. An alarm 
is issued to notify the manager at GW1 of the detection of 
abnormality in the digital signature (Step 3104). Then, GW1 50 
releases the connection with the terminal NLU4 (Step 3105). 

When receiving the transaction termination message, the 
terminal NLU4 terminates the process (Step 4104). 

On the other hand, as a result of the check, if abnormality 
is not found in the digital signature (Step 3103), the local ss 
electronic money content analyzer 115 searches the local 
electronic money generation and transfer log 1172 of the log 
recorder 117 to obtain a log with the acceptance number that 
coincides with the serial number of the local electronic 
money. 60 

If the search ended in failure, or though the search was 
successful, if there is a possibility that the local electronic 
money is a counterfeit as a result of comparison of the data 
on the local electronic money with the data on the log, it 
follows that local electronic money not under control of 65 
GW1 is circulating. Therefore, the above- described pro- 
cesses at Steps 3104 and 3105 are executed. 
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If the search is successful and if there is no possibility of 
counterfeit of the local electronic money according to the 
result of comparison between data on the local electronic 
money and data on the log, the local electronic money 
content analyzer 115 sends the local electronic money to the 
local electronic money eraser 114. 

In response, the local electronic money eraser 114 passes 
the acceptance number of the local electronic money to the 
electronic money content analyzer 112 and also passes data 
and the acceptance number of the local electronic money to 
the log recorder 117. 

The log recorder 117 writes information about local 
electronic money, received from the local electronic money 
eraser 114, in the local electronic money collection and 
erasure log 1173 (Step 3106). As shown in FIG. 4C, the 
number in the order of processing is written in the field of 
acceptance number. The serial number (equal to the accep- 
tance number of the local electronic money generation and 
transfer log 1172) is written in the field of index number. The 
date and time of entry of this information is written in the 
field of processing date and time. The sender, the receiver 
and the nominal value of local electronic money are written 
in the fields of sender, receiver and money received, respec- 
tively. At this point in time, no information is written in the 
fields of money change server and erasure result. 

The electronic money content analyzer 112 reads infor- 
mation from the local electronic money collection and 
erasure log 1173, the information corresponding to the 
acceptance number received from the local electronic money 
eraser 114. Next, the electronic money content analyzer 112 
returns the read out information and the acceptance number 
to the log recorder 117. In response, the log recorder 117 
writes the information about local electronic money, 
received from the electronic money content analyzer 112, to 
the electronic money payment log 1174 (Step 3106). As 
shown in FIG. 4D, the number in the order of processing is 
written in the field of acceptance number. The serial number 
of local electronic money (equal to the acceptance number 
at the local electronic money collection and erasure log 
1173) is written in the field of index number. The date and 
time of entry of this information is written in the field of 
processing date and time. The sender, the receiver and the 
nominal value of electronic money are written in the fields 
of the sender, receiver and money received, respectively. At 
this point in time, no information is written in the fields of 
bank name and remittance result. 

Then, the electronic money content analyzer 112 sends a 
connection request message to TP12a. TP12a passes the 
received connection request message to a terminal NB3 of a 
bank where an account of the organization to which the user 
at the terminal NLU4 belongs has been opened. When 
receiving the connection request message, the terminal NB3 
sends a connection-acknowledging message to the source of 
the connection request message. Thus, a connection is 
established between GW1 and the terminal NB3. 

Hie electronic money content analyzer 112 performs a 
process with a specific function using the amount of money 
to remit (the nominal value of local electronic money written 
on the electronic money payment log 1174) and a random 
number it generates as arguments to thereby generate a 
string of digits. The electronic money content analyzer 112 
sends a message requesting the transmission of electronic 
money added with the above-mentioned string of digits (a 
blind signature) to the terminal NB3 (Step 3107). 

When receiving this message to transmit electronic 
money, the terminal NB3 withdraws the requested amount of 
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money from the account of the user of GW1, that is, the If the terminal NB3 permits the receipt of the electronic 

organization in which LAN20 is formed, and after convert- money as a result of the check, it changes the electronic 

ing the money into electronic money as shown in FIG. 5, money received from the terminal NWU2 into cash, has the 

NB3 encrypts electronic money and sends it to GW1 (Step cas h deposited in the account of the user using the terminal 

1101)* 5 NWU2, and sends a receipt success message to the terminal 

GW1, on receiving electronic money from the terminal KWU2. Then, NB3 terminates the process by releasing the 

NB3, sends a connection request message to the terminal connection with the terminal NWU2 (Step 1103). 

NWU2 being f d^tmation of remittance (Step 3109). , n ^ tQ ^ ^ ^ a 

Hie terminal NWU2, on receiving a connection request don success m {Q Gwl and ^unmiXes me s b 

message, sends a connection-acM me ^% with io releasing the connection with GW1 (Step 2104). 

an accompanying public key to GW1 that gave NWU2 the & v e J ■ 

connection request message (Step 2101). Thus, a connection When receiving the transaction success message from the 

is established between GW1 and the terminal NWU2. terminal NWU2, GW1 passes this message, sent from the 

GW1, on receiving the connection-acknowledging terminal NWU2 through TP12a, to the electronic money 
message, encrypts a remittance amount of electronic money content analyzer 112. In response to this, the electronic 
using the public key that came with the connection- money content analyzer 112 passes this information to the 
acknowledging message, and sends encrypted electronic log recorder 117. The log recorder 117 writes "SUCCESS" 
money to the terminal NWU2 being the destination of in the remittance result field of the electronic money pay- 
remittance (Step 3110). ment log 1174 and also in the erasure result field of the local 

The terminal NWU2, on receiving encrypted electronic electronic money collection and erasure log 1173 (Steps 

money, decrypts the electronic money using its own secret 20 3114 and 3115). Then, GW1 terminates the process by 

key to thereby find a bank name that issued the electronic releasing the connection with the terminal NLU4 (Step 

money from the decrypted electronic money. Then, NWU2 3116). 

sends a connection request message to a terminal NB3 of Description will be given of the operation in a transaction 

mat bank " . . . . between terminals NLU4 connected to LAN20. 

The terminal NB3, on receiving the connection request ^ a , . r , ■ ■ iL r 

message, sends a connection-acknowledging message with f 10 « a flowchart for explaining the operation of 

its own public key to the terminal NWU2 that sent the remittance from a terminal NLU4a to a terminal NLU45. 

connection request message. As a result, a connection is Th e terminal NLU4a sends a connection request message 

established between the terminal NWU2 and the terminal to the terminal NLU4fc being the destination of remittance 

NB3. 30 (Step 4201). 

The terminal NWU2 encrypts electronic money received The terminal NLU46, when receiving the connection 

from GW1 with a public key that came with the connection- request message, sends a connection- acknowledging mes- 

acknowledging message, and sends the encrypted electronic sa ge with its own public key to the terminal NLU4a, that 

money to the terminal NB3 (Step 2102). gaV e NLU46 the connection request message (Step 4301). 

The terminal NB3, on receiving the encrypted electronic 35 Thus, a connection is established between the terminals 

money, decrypts the electronic money using its own secret NLU4a and NLU4& 

key. The terminal NB3 checks the serial number and a digital Next ^ ^mmA NLU4a, using its own secret key, 

signature on the decrypted electronic money and thereby d ^ encrypted local electronic money which has 

judges whether or not to approve the receipt of the electronic been ^ tored ^ a ™ devi md adds a di [ tal si ^ 

money (Step 1102). As a result of the check, if it rejects the ^ t . , . 1 . . 6 ' . 4 . 6 . , 6 /c , 

recemt of electronic monev NB3 sends a reiect messaee to t0 ±c local electromc mone y b y usm S ^ secret ke Y ( Ste P 

receipt ot electronic money, NB3 sends a reject message to ^ 

the termmal NWU2. Subsequently, NB3 releases the con- / ' L1 . , - I* * ■ i 

nection with NWU2 tronic money using a pubhc key received from the terminal 

. , ™ TrT „ , , NLU46, and sends the encrypted local electronic money to 

In response to this, the terminal WU2 sends a transac- the terminal NLU46 (Step 4203). After this, NLU4a releases 

tion failure message to GW1 (Step 2103), and then termi- 45 me connection with the terminal NLU46. 

nates the process. ™ „ ■ . vrrx^, . 

™, M , c m -j The terminal NLU4& receives the encrypted local elec- 

GW1 passes the transaction failure message, received 4 . - lft -. , . . L1 t 

c >u \ ■ nnmn *u l tdo * *u i * • tromc money (Step 4302), and stores it in a suitable storage 

from the terminal ^ through TM2« to he electromc ^ ^/^^ ^ e me ted local 

money content analyzer 112. In response to this, the elec- . - * 1 

, J \ . «-! j lL - • r i- . money by decrypting it using its own secret key. 

tromc money content analyzer 112 sends this information to 50 / , , 7. ° t . ■ . , 

the log recorder 117 and the local electronic money content A preferred embodiment of the present invention has been 

analyzer 115. The log recorder 117 writes "FAILURE" in the described. 

field of the remittance result of the electronic money pay- As described above, in this embodiment, electronic 
ment log 1174 and the fields of erasure result of the local money that can be handled by the terminals NLU4 con- 
electronic money collection and erasure log 1173 (Steps 55 nected t0 LAN 20 k limited to a kind of electronic money 
3111 and 3112). The local electronic money content analyzer current only in LAN20. More specifically, the electronic 
115 returns local electronic money corresponding to the money is limited to local electronic money, a different kind 
amount of electronic money involved in the transaction of electronic money from electronic money issued by ter- 
failure to the moneybox 1151 for the terminal NLU4 of the minals NB 3 - 

money sender. GW1 sends the money sender at the terminal eo When a terminal NLU4 connected to LAN20 conducts 

NLU4 a message indicating that the local electronic money electronic commerce with a terminal NWU2 connected to 

has been returned (Step 3112). GW1 then terminates the WAN10, a money change process at GW1 is invariably 

process by releasing the connection with the terminal NLU4 involved in the settlement of accounts. In addition, the 

(Step 3113). contents of the process are recorded in a log. 

Hie terminal NLU4 terminates the process, when it 65 In other words, in the present embodiment, when a 

receives the message indicating that the local electronic member of an organization having LAN20 formed therein 

money has been returned (Step 4105). conducts electronic commerce with a user outside the 
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organization, a money change process at GW1 between 
electronic money and local electronic money is always 
carried out in the settlement of accounts, and the process is 
recorded in a log. Therefore, the administrative department 
(accounting or materials department, for example) can man- 5 
age the account settlement between a member of the orga- 
nization and a user outside the organization by monitoring 
the log in which the details of the process at GW1 are 
recorded. Accordingly, it is possible to minimize damage 
resulting from an error in remittance or embezzlement. 10 

Local electronic money can be interchanged directly 
between the members of an organization without interven- 
tion of GW1, in which case anonymity as the advantage in 
settlement by electronic money can be maintained. 

In the embodiment mentioned above, description has been 15 
given of the electronic money digital cash system on the 
assumption of the use of ecash that adopts blind signature 
that provides electronic money with superlative anonymity 
(Scientific American, August 1992, pp. 96-101). However, 
the present invention is not limited to this electronic money, 20 
but may be applied to various electronic money digital cash 
systems. 

In the present embodiment, discussion has been devoted 
to the electronic money management apparatus which has a ^ 
gateway adapted to perform a money change function and is 
located between LAN20 and WAN10. However, the present 
invention is not limited to this arrangement, but the appa- 
ratus (a network apparatus, such as a gateway or a router), 
which can intercept electronic money flowing from one 3Q 
network to another, should be provided with a money change 
function. 

Furthermore, in the present embodiment, description has 
been given of the electronic money management system 
wherein in the interchange of local electronic money, local 35 
electronic money can be transferred directly between the 
terminals NLU4a and NLU46 connected to LAN20 without 
using an intervening GW1. However, the present invention 
is not limited to this type, but the intervening GW1 may be 
employed. 40 

Description will now be given of a first modification of 
the present embodiment, in which an intervening GW1 is 
used in the interchange of local electronic money between 
the terminals NLU4a and NLU46. 

In this first modification, GW1 is charged with not only 45 
with vicariously executing money remittance but also 
changing received local electronic money for local elec- 
tronic money of proper nominal values and making remit- 
tance. 

FIG. 11 is a flowchart for explaining the operation of 50 
remittance from the terminal NLU4<j to the terminal NLU4& 
in the first modification of the present embodiment. 

The terminal NLU4a retrieves a plurality of local elec- 
tronic money stored in a storage device, creates a message 55 
including the local electronic money added with a script of 
the contents of a request to GW1 and a digital signature, and 
sends the message to GW1 (Step 4401). 

FIG. 12 shows an example of a message to be sent by the 
terminal NLU4 od the sender side to GW1 in the first 60 
modification of the present embodiment. 

In FIG. 12, reference numerals 701 to 703 denote a 
plurality of local electronic money retrieved from the stor- 
age device. FIG. 12 shows the same format (but in a simple 
form) for these electronic money as in FIG. 6. Reference 65 
numeral 704 denotes a script and a digital signature added to 
local electronic money 701 to 703. 
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In FIG. 12, the contents of the script are as follows. 
@ sum (256, 303, 386) 

Sum up local electronic money of serial numbers 256, 303 
and 386. 
@ div (¥1,000,000: userl) 

Send ¥1,000,000 to the user at the terminal NLU46. 
@ bal (:ME): 

Return the balance to the source of remittance. 

The digital signature at the end of the message is formed 
by encryption of the message from its head portion till the 
end of the script using a secret key of the user at the terminal 
NLU4a as the source of remittance. 

When receiving the message from the terminal NLU4a, 
GW1 passes the message through TP12& to the local elec- 
tronic money content analyzer 115. In response to this, the 
local electronic money content analyzer 115 checks the 
digital signature attached at the end of the message (Step 

3201) . 

If abnormality is found by checking the digital signature, 
GW1 performs an abnormal termination routine to close the 
process (Step 3202). On the other hand, when abnormality 
is not found, the local electronic money content analyzer 115 
checks the digital signature on each piece of local electronic 
money (reference numerals 701 to 703 in FIG. 12) included 
in the message received (Step 3203). 

If abnormality is found as a result of the check, an 
abnormal termination routine is performed to terminate the 
process (Step 3202). On the other hand, if no abnormality is 
found, the local electronic money content analyzer 115 
searches the local electronic money generation and transfer 
log 1172 to retrieve a log with an acceptance number 
coincident with the serial number of each piece of local 
electronic money included in the message received. Then, 
the money content analyzer 115 checks for double use or the 
like of local electronic money from data on the log retrieved 
(Step 3204). 

If abnormality is found by the check, GW1 performs an 
abnormal termination routine to close the process (Step 

3202) . If no abnormality is found, the local electronic money 
content analyzer 115 transfers the local electronic money 
received and its acceptance number to the local electronic 
money eraser 114. The log recorder 117 writes information 
regarding each local electronic money included in the mes- 
sage received by the local electronic money content analyzer 
115 in the local electronic money collection and erasure log 
1173 (Step 3205). At this point, no data is written in the 
fields of the money change server and the erasure result in 
the local electronic money collection and erasure log 1173. 
In addition, the local electronic money is not erased. 

On receiving local electronic money and its acceptance 
number from the money content analyzer 115, the local 
electronic money eraser 114 sends a request to the local 
electronic money generator 113 to generate local electronic 
money. The request includes information about the receiver, 
sender, money received, and a script shown in FIG. 12. 

The local electronic money generator 113 generates local 
electronic money according to the request from the local 
electronic money eraser 114 (specifically, the contents of the 
script in FIG. 12), adds information about destinations 
specified by the request (¥1,000,000 to the terminal NLU46; 
¥208,000 to be returned to the terminal NLU4a in the 
example in FIG. 12) to the local electronic money, and sends 
the local electronic money to the local electronic money 
content analyzer 115. The log recorder 117 records infor- 
mation required for generation and management of local 
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electronic money to the local electronic money generation FIG. 14 shows an example of the data stored in the 

and transfer log 1172. Subsequently, the local electronic permission file 1152. 

money generator 113 sends a message to the local electronic In FIG. 14, the name of the user at the terminal NLU4, 

money eraser 114. that is, a member of the organization having LAN20 formed 

The local electronic money eraser 114 erases the local 5 therein, is written in the user field. The maximum amount 

electronic money sent from the terminal NLU4a of the ^at can be ^ b V ^ user at a time is written in the 

sender The log recorder 117 writes information in the empty maximum remittance amount field. The address of the 

fields, that is, in the money change server field and the rece ! ver l ° J^V h ^ &T Can Send mone y 15 written in the 

, . . receiver address Held, 

erasure result field in the local electronic money collection , c , . ... ...„.„ 

and erasure loe 1173 io ^ a resu ^ t °^ me remittance umit examination, if it makes 

, a decision that the nominal value of the local electronic 

Subsequent^, the bcal electronic money content anidyzer m ^ ^ ^ ^ j, ] ^ tfac ^ ^ 

115 stores the local electronic money received from the local , ocal clectronic moncy contcnt analyzer U5 stores ^ 

electronic money generator 113 into the moneybox 1151 of m in ^ m0 box n51 o{ me US6f ^ ^ 

the user specified by the desunahons ^information added to analyzer 115 sends a repayment message through TP12fc to 

the local electtonic money. FIG. 13 shows, in the first the user at the terminal NLU4. If the local electronic money 

modification of the present embodiment, the local electronic anal U5 decides that ^ Umit k no| 

money to be deposited in the moneybox 1151 as the desti- 6Xceeded> GW1 rfolms ^ remittance pr0C edure on 

nation of remittance according to the message shown in FIG. behalf of , he ULm b moyfin the ^ sl „ ^ the 

12. In this case local electronic money worth ¥1000,000 is t embodiment described above (by procedure from 

transferred to the terminal NLU4&, while local electromc 20 mi ^ St 3m Qn m FJG g) 

money worth 536 208,000 is transferred to the terminal x . .. . . „ 

.„...' . . « .u i i i . • • .u In a second modification, even when a member of an 

NLU4a. The format of the local electronic money is the . . . , , , • umiA.' . j . 

• r-.^ .,,..„ . , ,, ... ',, organization (a user at a terminal NLU4) tries to send a large 

same asm FIG. 6, but is illustrated here ma simplified form. ° , v . ... ,. . . .°. 

.„,. sum of money in excess of his authorization to a user out of 

The local electronic money content analyzer 115 sends a , he orgaDization ( term i Qa i NWU2), this procedure is refused 

paying-in message for the terminal NLU4 of destination to b GW1 

^^"^^r^^T'T t0 ^ dC ^? a " In the'second modification, it may be so arranged that 

tion Step 3206). GW1 then terminates the process (Step eyen tf ^ sum of remittance ^ ^ ^ ^ permissible 

, kTT , T ., „ < * * upper limit, he can still make a remittance if he obtains 

The terminals NLU4a and NLU4i> can confirm that local 3Q ^ from mQtijer member (bis rfor offi for 

electronic money has been paid m, by receiving a paying-in , e) of ^ organization . 

message from GW1. (Steps 4402 and 4501) . ' . „ 6 . , t . . . , 

. f „ ..„.„, ,,. . FIG. 15 is a flowchart for explaining the operation when 

In the first modification of the present embodiment, the a ^ at a terminal obtains ^ from a uger at 

users of the terminals NLU4 can use electronic money of a terminal m the modification . 

various nominal values by having electronic money _ c . . . 1KTrTT . , . A i i • 

, , , mi71 ■ + , ; . 6 ca'a • 35 The user at the terminal NLU4a retneves local electronic 

exchanged by GW1 into electronic money of desired nomi- , L * i_ ■ • , j . -j * L c 

1 1 r *u « * a- * *u lurt. * money that he is going to send outside the organization from 

nal values. In the first modification, the establishment opera- ' j • 5 ** 1. 

c . 4 , • 1 » tt t t a j • a storage device, and attaches a remittance authorization 

tion of a connection between a terminal NLU4 and GW1 in ~ . . . , . . 

. , 4 , . * . 4 . , t request message, mcluding a script and a digital signature, to 

the present embodiment applies and its description is omit- *i_ , 1 1 * • j j^iT 

- r rr r the local electronic money, and sends the money to the 

ted - 40 terminal NLU4b to obtain approval (Step 4601). 

In the present embodiment, when money is sent from a „ rr , ^ , . ,. , . - , , 

- 1 vrriTi a. a i. t A^rt , . ■ 1 xm , T ™ FIG. 16 is a diagram showing an example of local 

terminal NLU4 connected to LAN20 to a terminal NWU2 , . . .5, •** *u • 

. j . v.*. a * , , . . £ electromc money with a remittance authorization request 

connected to WAN10, description has been given of a case . * . . , ^ 

- ' , , & , . . _ _ message attached thereto in the second modification, 

where GWI performs the remittance procedure on behalf of , ^ , - , „^ , , , 

the terminal NLU4. However, the present invention is not 4S In 16 > reference numeral 7U denotes local electronic 

United to this method. GWI may be arranged to manage the mone y retneved fro . m ^ e stora 8 e dev u ice - . ' ° f 11118 

value of money that each user at a terminal NLU4 connected ^omc money is the same as that in FIG. 6, but is 

to LAN20 sends to a terminal NWU2 connected to WAN10, M>***A here m a simple form. Reference numeral 712 

• ..... . „ f ^ denotes a remittance authorization request message (a script 

in addition to its vicarious procedures or remittance. , v 4J n ,,,,.. 

, ,. c A . - . ... 4 and a digital signature) attached to the local electronic 

As a second modification of the present embodiment, 50 money 7^ 

description will be given of a case where an upper limit is , JL^ ' ( 

set for the value of money that a user of a terminal NLU4 (a In nG ' 16 > tne of the ^P 1 are as foUows - 

member of an organization) sends to another user at a @ message 35429: 

terminal NWU2 (a user outside the organization). A request for approval of remittance for settlement No. 

Suppose that a user at a terminal NLU4 sends a large sum 55 

of money higher than the upper limit allotted to the user, in @ comment 

other words, in excess of his authority, to another user at a The script "This is to request that approval be given to my 

terminal NWU2 (a user outside the organization). making a remittance as per settlement No. 35429/' follow- 

GW1 receives through TP12fc local electronic money sent ing the comment is sent as a message to the destination of 

from the terminal NLU4 and passes it to the local electronic 60 remittance. The user at the receiving terminal reads this 

money content analyzer 115. In response to this, the local message and decides whether or not to approve the request, 

electronic money content analyzer 115 reads the nominal The digital signature at the end of the message was 

value from the Value field and information about the sender formed by encrypting the contents from the beginning of the 

from the To field on the received local electronic money message to the end of script using a secret key of the user at 

(FIG. 6), and examines a limit of remittance imposed on the 65 the sending terminal NLU4o. 

sending user at the terminal NLU4 stored in the permission The user at the terminal NLU4i reads the comment of the 

file 1152. script attached to the local electronic money received from 
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the terminal NLU4a, and decides whether or not to grant 
authorization to remit this local electronic money (Step 
4701). If authorization to remit is not granted (Step 4702), 
the local electronic money is sent back to the terminal 
NLU4o (Step 4703). In this case, even if the user at the 
terminal NLU4a wants to send the local electronic money to 
a user outside the organization (a user at the terminal 
NWU2), money change to electronic money is refused by 
GW1, so that settlement is impossible. Therefore, the ter- 
minal NLU4a has to close the process (Step 4602). 

On the other hand, when the authorization to remit money 
is granted (Step 4702), the user at the terminal NLU46 
attaches an authorization grant message, consisting of a 
script and a digital signature, to the local electronic money 
having an authorization request message attached thereto 
and received from the terminal NLU4a , and sends the local 
electronic money back to the terminal NLU4a (Step 4704). 

FIG. 17 is a diagram showing an example of local 
electronic money with an accompanying authorization grant 
message in the second modification. 

In FIG. 17, reference numeral 713 denotes an authoriza- 
tion grant message. Reference numerals 711 and 712 denote 
local electronic money accompanying authorization request 
message sent from the terminal NLU4a, which are identical 
with those in FIG. 16. 

In FIG. 17, the contents of the script are as follows. 

@ message accepted: 

The request for approval of your message is accepted. 
@ comment 

The script "message accepted" following the comment is 
sent to the terminal NLU4a. By reading this message, the 
user at the terminal NLU4a knows that he is permitted to 
send money. 

Even when the local electronic money content analyzer 
115 decides that the local electronic money received through 
T?12b from the terminal NLU4a is larger than the permis- 
sible maximum remittance of the user at the terminal 
NLU4a stored in the permission file 1152, if an authorization 
grant message is attached to the local electronic money, 
GW1 performs the remittance procedure by following the 
same steps (from and after Step 3102 on in FIG. 8) as in the 
present embodiment. 

As has been described, according to the present invention, 
when electronic money is remitted from one network to 
another, a money change server is used to change electronic 
money current only within one network into electronic 
money current within another network. 

Therefore, when the users on a network utilize a settle- 
ment process using electronic money, by managing the 
money change process, it becomes possible to manage the 
interchange of electronic money with the users on another 
network without affecting the working environment of elec- 
tronic commerce. 

What is claimed is: 

1. An electronic money management method employing 
an electronic money digital cash system, said method 
employing: 

local electronic money usable on a LAN which employs 
a same currency as wide electronic money usable on a 
WAN, said local electronic money being usable only 
within an organization in which said LAN is operable; 

a network device, connected to said LAN and said WAN, 
for mediating electronic money transactions between a 
terminal connected to said LAN and a terminal con- 
nected to said WAN, said network device carrying out 
the jobs of: 
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as a first job, receiving from said LAN said local elec- 
tronic money encrypted by an encryption key of said 
network device whose destination terminal is a terminal 
connected to said WAN, decrypting said local elec- 
tronic money by a decryption key of said network 
device to confirm the amount of said local electronic 
money, requesting issuance of said wide electronic 
money in the same amount as said local electronic 
money thus received to an issue server connected to 
said WAN, and upon receipt of said wide electronic 
money encrypted by said encryption key of said net- 
work device from said issue server, decrypting said 
wide electronic money by said decryption key of said 
network device to confirm the amount of said wide 
electronic money, erasing said local electronic money 
thus received, and encrypting said wide electronic 
money by an encryption key of said destination termi- 
nal of said local electronic money thus received to 
transmit said wide electronic money thus encrypted to 
said destination terminal of said local electronic money 
thus received through said WAN; and 

as second job, receiving from said WAN said wide 
electronic money encrypted by said encryption key of 
said network device whose destination terminal is a 
terminal connected to said LAN, decrypting said wide 
electronic money by said decryption key of said net- 
work device to coofirm the amount of said wide elec- 
tronic money, encrypting said wide electronic money 
thus decrypted by an encryption key of a receiving 
server connected to said WAN, transmitting said wide 
electronic money thus encrypted to said receiving 
server, and upon receipt of acknowledge from said 
receiving server as to receipt of said wide electronic 
money, generating said local electronic money in the 
same amount as said wide electronic money, and 
encrypting said local electronic money by an encryp- 
tion key of said destination terminal of said wide 
electronic money thus received to transmit said local 
electronic money thus encrypted to said destination 
terminal of said wide electronic money thus received 
through said LAN. 

2. An electronic money managing method according to 
claim 1, wherein: 

said issue server and said receiving server is a server of a 
bank that has an account of said organization in which 
said LAN is operable; 

said issue server subtracts the same amount of money as 
said wide electronic money transmitted to said network 
device from said account of said organization; and 

said receiving server adds the same amount of money as 
said wide electronic money received from said network 
device to said account of said organization. 

3. An electronic money managing method according to 
claim 1, wherein: 

histories as to erasing of said local electronic money and 
transmission of said wide electronic money carried out 
by said network device in said first job, and histories as 
to reception of said wide electronic money and gen- 
eration of said local electronic money carried out by 
said network device in said second job, are stored in 
said network device. 

4. An electronic money managing method according to 
claim 1, wherein: 

in said first job, if the amount of said local electronic 
money received from said LAN whose destination 
terminal is the terminal connected to said WAN 
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exceeds a predetermined amount allocated to a member 
of the terminal connected to said LAN, the received 
local electronic money is sent back to the terminal 
connected to said LAN which is a transmitting origin of 
said local electronic money, without making the request 
for issuance of said wide electronic money to said issue 
server connected to said WAN. 

5. An electronic money managing method according to 
claim 4, wherein: 

in said first job, when the amount of said local electronic 
money received from the LAN whose destination ter- 
minal is the terminal connected to said WAN exceeds 
a predetermined amount allocated to a member of the 
terminal connected to said LAN, and said local elec- 
tronic money has a message that the member of the 
terminal connected to said LAN which was the trans- 
mitting origin of said local electronic money is allowed 
to transmit such an amount exceeding said predeter- 
mined amount allocated, making the request for issu- 
ance of said wide electronic money to said issue server 
connected to said WAN, then executing the additional 
first job procedures. 

6. An electronic money management method according to 
claim 1, wherein: 

said network device further carries out the job of: 
as a third job, changing a combination of units comprising 
said local electronic money transmitted from said ter- 
minal connected to said LAN in accordance with 
instructions from said terminal connected to said LAN, 
and sending said electronic money thus changed back 
to said terminal. 

7. An electronic money managing device for mediating 
electronic money transactions employing an electronic 
money digital cash system between a terminal connected to 
a LAN and a terminal connected to a WAN, said WAN on 
which wide electronic money flows, and said LAN on which 
local electronic money usable only within an organization in 
which said LAN is operable and having a same currency as 
said wide electronic money flows, said managing device 
comprising: 

a first means for receiving from said LAN said local 
electronic money encrypted by an encryption key of 
said network device whose destination terminal is a 
terminal connected to said WAN, decrypting said local 
electronic money by a decryption key of said network 
device to confirm the amount of said local electronic 
money, requesting issuance of said wide electronic 
money in the same amount as said local electronic 
money thus received to an issue server connected to 
said WAN, and upon receipt of said wide electronic 
money encrypted by said encryption key of said net- 
work device from said issue server, decrypting said 
wide electronic money by said decryption key of said 
network device to confirm the amount of said wide 
electronic money, erasing said local electronic money 
thus received, and encrypting said wide electronic 
money by an encryption key of said destination termi- 
nal of said local electronic money thus received to 
transmit said wide electronic money thus encrypted to 
said destination terminal of said local electronic money 
thus received through said WAN; and 

a second means for receiving from said WAN said wide 
electronic money encrypted by said encryption key of 
said network device whose destination terminal is a 
terminal connected to said LAN, decrypting said wide 
electronic money by said decryption key of said net- 
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work device to confirm the amount of said wide elec- 
tronic money, encrypting said wide electronic money 
thus decrypted by an encryption key of a receiving 
server connected to said WAN, transmitting said wide 
electronic money thus encrypted to said receiving 
server, and upon receipt of acknowledge from said 
receiving server as to receipt of said wide electronic 
money, generating said local electronic money in the 
same amount as said wide electronic money, and 
encrypting said local electronic money by an encryp- 
tion key of said destination terminal of said wide 
electronic money thus received to transmit said local 
electronic money thus encrypted to said destination 
terminal of said wide electronic money thus received 
through said LAN. 

8. An electronic money managing device according to 
claim 7, wherein: 

said issue server and said receiving server is a server of a 
bank having an account of said organization in which 
said LAN is operable; 

said issue server subtracts the same amount of money as 
said wide electronic money transmitted to said network 
device from said account of said organization; and 

said receiving server adds the same amount of money as 
said wide electronic money received from said network 
device to said account of said organization. 

9. An electronic money managing device according to 
claim 7, further comprising: 

history recording means for recording histories as to 
erasing of said local electronic money and transmission 
of said wide electronic money carried by said first 
means, and histories as to reception of said wide 
electronic money and generation of said local elec- 
tronic money carried by said second means. 

10. An electronic money management device according to 
claim 7, wherein: 

if the amount of said local electronic money received 
from said LAN whose destination terminal is the ter- 
minal connected to said WAN exceeds a predetermined 
amount allocated to a member of the terminal con- 
nected to said LAN, said first means sends the received 
local electronic money back to the terminal connected 
to said LAN which was a transmitting origin of said 
local electronic money without making the request for 
issuance of said wide electronic money to said issue 
server connected to said WAN. 

11. An electronic money managing device according to 
claim 10, wherein: 

when the amount of said local electronic money received 
from the LAN whose destination terminal is the termi- 
nal connected to said WAN exceeds a predetermined 
amount allocated to a member of the terminal con- 
nected to said LAN, if said local electronic money has 
a message that the member of the terminal connected to 
said LAN and being the transmitting origin of said local 
electronic money is allowed to transmit such an amount 
exceeding said predetermined amount allocated, said 
first means makes the request for issuance of said wide 
electronic money to said issue server connected to said 
WAN, then executes the additional first means proce- 
dures. 

12. An electronic money managing device according to 
claim 7, further comprising: 

changing means for changing a combination of units 
comprising said local electronic money transmitted 
from said terminal connected to said LAN in accor- 
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dance with instructions from said terminal connected to 
said LAN, and sending said electronic money thus 
changed back to said terminal. 
13. An information recording medium storing therein an 
electronic money managing program for mediating elec- 5 
tronic money transactions employing an electronic money 
digital cash system between a terminal connected to a LAN 
and a terminal connected to a WAN, said WAN on which 
wide electronic money flows, and said LAN on which local 
electronic money usable only within an organization in 10 
which said LAN is operable and having the same currency 
as said wide electronic money flows, said electronic money 
managing program implementing the following means in an 
information processing device connected to said LAN and 
said WAN: is 
a first means for receiving from said LAN said local 
electronic money encrypted by an encryption key of 
said network device whose destination terminal is a 
terminal connected to said WAN, decrypting said local 
electronic money by a decryption key of said network 20 
device to confirm the amount of said local electronic 
money, requesting issuance of said wide electronic 
money in the same amount as said local electronic 
money thus received to an issue server connected to 
said WAN, and upon receipt of said wide electronic 25 
money encrypted by said encryption key of said net- 
work device from said issue server, decrypting said 
wide electronic money by said decryption key of said 
network device to confirm the amount of said wide 
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electronic money, erasing said local electronic money 
thus received, and encrypting said wide electronic 
money by an encryption key of said destination termi- 
nal of said local electronic money thus received to 
transmit said wide electronic money thus encrypted to 
said destination terminal of said local electronic money 
thus received through said WAN; and 
a second means for receiving from said WAN said wide 
electronic money encrypted by said encryption key of 
said network device whose destination terminal is a 
terminal connected to said LAN, decrypting said wide 
electronic money by said decryption key of said net- 
work device to confirm the amount of said wide elec- 
tronic money, encrypting said wide electronic money 
thus decrypted by an encryption key of a receiving 
server connected to said WAN, transmitting said wide 
electronic money thus encrypted to said receiving 
server, and upon receipt of acknowledge from said 
receiving server as to receipt of said wide electronic 
money, generating said local electronic money in the 
same amount as said wide electronic money, and 
encrypting said local electronic money by an encryp- 
tion key of said destination terminal of said wide 
electronic money thus received to transmit said local 
electronic money thus encrypted to said destination 
terminal of said wide electronic money thus received 
through said LAN. 

***** 
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